// Copyright 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "content/browser/bad_message.h"

#include "base/bind.h"
#include "base/debug/crash_logging.h"
#include "base/debug/dump_without_crashing.h"
#include "base/logging.h"
#include "base/metrics/histogram_macros.h"
#include "base/strings/string_number_conversions.h"
#include "content/public/browser/browser_message_filter.h"
#include "content/public/browser/browser_thread.h"
#include "content/public/browser/render_process_host.h"

namespace content {
namespace bad_message {

    namespace {

        void LogBadMessage(BadMessageReason reason)
        {
            LOG(ERROR) << "Terminating renderer for bad IPC message, reason " << reason;
            UMA_HISTOGRAM_SPARSE_SLOWLY("Stability.BadMessageTerminated.Content", reason);
            base::debug::SetCrashKeyValue("bad_message_reason",
                base::IntToString(reason));
        }

        void ReceivedBadMessageOnUIThread(int render_process_id,
            BadMessageReason reason)
        {
            DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
            RenderProcessHost* host = RenderProcessHost::FromID(render_process_id);
            if (!host)
                return;

            // A dump has already been generated by the caller. Don't generate another.
            host->ShutdownForBadMessage(
                RenderProcessHost::CrashReportMode::NO_CRASH_DUMP);
        }

    } // namespace

    void ReceivedBadMessage(RenderProcessHost* host, BadMessageReason reason)
    {
        LogBadMessage(reason);
        host->ShutdownForBadMessage(
            RenderProcessHost::CrashReportMode::GENERATE_CRASH_DUMP);
    }

    void ReceivedBadMessage(int render_process_id, BadMessageReason reason)
    {
        // We generate a crash dump here since generating one after posting to the UI
        // thread is less useful.
        LogBadMessage(reason);
        base::debug::DumpWithoutCrashing();

        if (!BrowserThread::CurrentlyOn(BrowserThread::UI)) {
            BrowserThread::PostTask(
                BrowserThread::UI,
                FROM_HERE,
                base::Bind(&ReceivedBadMessageOnUIThread, render_process_id, reason));
            return;
        }
        ReceivedBadMessageOnUIThread(render_process_id, reason);
    }

    void ReceivedBadMessage(BrowserMessageFilter* filter, BadMessageReason reason)
    {
        LogBadMessage(reason);
        filter->ShutdownForBadMessage();
    }

} // namespace bad_message
} // namespace content
